Oracle E-Business Suite iSupport Component Vulnerability

CVE-2019-2829

What is CVE-2019-2829?

A vulnerability exists in the iSupport component of Oracle E-Business Suite, impacting multiple versions. This issue allows an unauthenticated attacker with network access to exploit the system via HTTP, necessitating human interaction to succeed. Although primarily located within Oracle iSupport, successful exploitation can lead to unauthorized access to sensitive information and the ability to manipulate Oracle iSupport data, including updates and deletions. Organizations using affected versions should take immediate action to assess and mitigate potential risks.

References